summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJeff Tinker <jtinker@google.com>2015-09-21 18:58:02 +0000
committerAndroid Git Automerger <android-git-automerger@android.com>2015-09-21 18:58:02 +0000
commit9dcb4c63c6b8876a28eab3774ac92cc5e3af13c7 (patch)
tree3bda253cf775abffaaf5415c71ff2aeb4fa383d2
parent1ac11129220c71a208da4b4339ac6131132a7bd8 (diff)
parent4ae700d2bd467f18e5de8b5d1579d7e20da88e36 (diff)
downloadframeworks_av-9dcb4c63c6b8876a28eab3774ac92cc5e3af13c7.zip
frameworks_av-9dcb4c63c6b8876a28eab3774ac92cc5e3af13c7.tar.gz
frameworks_av-9dcb4c63c6b8876a28eab3774ac92cc5e3af13c7.tar.bz2
am 4ae700d2: am 160ed868: Merge "DO NOT MERGE Fix vulnerability in mediaserver" into lmp-dev
* commit '4ae700d2bd467f18e5de8b5d1579d7e20da88e36': DO NOT MERGE Fix vulnerability in mediaserver
-rw-r--r--media/libmedia/ICrypto.cpp2
1 files changed, 2 insertions, 0 deletions
diff --git a/media/libmedia/ICrypto.cpp b/media/libmedia/ICrypto.cpp
index 2abb3ac..f51aaa2 100644
--- a/media/libmedia/ICrypto.cpp
+++ b/media/libmedia/ICrypto.cpp
@@ -246,6 +246,7 @@ status_t BnCrypto::onTransact(
size_t totalSize = data.readInt32();
void *srcData = malloc(totalSize);
+ memset(srcData, 0, totalSize);
data.read(srcData, totalSize);
int32_t numSubSamples = data.readInt32();
@@ -262,6 +263,7 @@ status_t BnCrypto::onTransact(
secureBufferId = reinterpret_cast<void *>(static_cast<uintptr_t>(data.readInt64()));
} else {
dstPtr = malloc(totalSize);
+ memset(dstPtr, 0, totalSize);
}
AString errorDetailMsg;